
People's Republic of China) 
Guangdong Province ) 
Guangzhou ) 
Consulate General of the ) 
United States of America ) 



AFFIDAVIT 



ss: 



Before me, David H. Kornhauser, Vice Consul of the United States of 
America at Guangzhou, duly commissioned and qualified, personally 
appeared Yang Gao , who, being duly sworn, deposes 

and says: 



Please see the attached. 



RECEIVED 

AUG 3'0 2004 

Technology Center 2100 




Subscribed and sworn to before me 

this 30th day of July 2004 




Al/6 2 3 20M Z 



Affidavit 



In re first Office Action for Application Number 09/916,252: 

This reply concerns the rejection of patent application 09/916,252 based on Erik 
Hatcher's anticipation, "Remote Scripting Using a Servlet". 

Hatcher's prior art, it is claimed in the Office Action, receives the output of an HTTP 
response associated with an HTTP request into an HTML iframe element without 
adding a Universal Resource Locator (URL) to the application's history list. 

In fact, Appeon can demonstrate that the prior art does add the URL to the 
application*s history list. 

Attached are two sets of source code: 

• Erik Hatcher's source code unchanged fi-om the first office action on our 
application. 

• Appeon source code. To demonstrate the Appeon solution, the same user 
interface code was used, with our modifications to the remote procedure call 
based on our different approach as disclosed in our patent application. 

Appeon's different solution does not add the URL to the application's history list and 
therefore is a different solution, not anticipated by prior art. 



Sincerely 





AUG 3' 0 2004 



Technology Center 2100 



Yang Gao 

Chief Technology Officer 
Appeon Corporation 
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1 <html> 

2 <script> 
var ifrCount=0 
function _l(callback, param) 
{ 



3 
4 
5 
6 
7 
8 
9 

10 } 
11 

12 function LMLPost(serverPage, callback, serverFunction, data) 

13 { 

var strHTML=new String(); 
if(!document.forms.LMLform) 



14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 
26 
27 
28 
29 
30 



46 
47 
48 
49 
50 
51 
52 
53 
54 
55 
56 
57 
58 
59 
60 
61 



var strParam = unescape(param); 
window.status=""; 

eval(callback + "("' + strParam + '")"); 
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{ 



} 



strHTIVIL="<div><form name=\"LMLform\"method=\"post\"action=\""+ serverPage + "\">"; 

strHTML+="<input type=rhidden\" name=\"func\">": 

strHTML+="<input type=\"hidden\" name=\"params\">"; 

strHTML+="<input type=\"hidden\" name=\"callback\">"; 

strHTML+="</form></dlv>"; 

docunnent.body.insertAdjacentHTML("BeforeEnd".strHTML) 



if(ifrCount>0) 

document.all('divJ+(ifrCount-1)).innerHTML="; 
document.forms.LMLform.func.value = serverFunction; 
document.forms.LMLform.params.value = data; 
document.forms.LMLform.callback.value = callback; 
strHTML="<div id='div_"+ifrCount+"'><iframe style=\"position:absolute;visibility:liidden;left:0;top:OV' name 
= + ifrCount +'"></iframe></div>"; 

document.body.insertAdjacentHTML("BeforeEnd",strHTML); 
document.forms.LMLform.target="+ifrCount; 
document.forms.LMLform.submit(); 
ifrCount++; 



31 
32 
33 
34 

35 } 
36 

37 function post_data() 

38 { 
39 
40 
41 
42 
43 } 
44 

45 function clearDropDown (sel Field) 



var oTemp = document.all("category"); 
var nindex = oTemp.options[oTemp.selectedlndex].value; 
LMLPost("server2.asp", "my_callback", "getData",nlndex); 



{ 



while (selField. options. lengtli > 0) 
selField.options[0] = null; 



} 



function my_callback (valueTextStr) 
{ 

if(valueTextStr == "error") 



{ 



alert("error testing: call server failed"); 
return; 



} 

var selField = document.all("subcategory"); 
clearDropDown(selField); 
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62 
63 
64 
65 
66 
67 
68 
69 
70 
71 
72 
73 
74 
75 



// create an array of each item for the dropdown 

var aPairs = valueTextStrsplitC';"); 

if (valueTextStr.substr(valueTextStr.iength - 1) == ';') { 



// Fill 'er up 

for (var i=0; i < aPairs. length; i++) { 
aValueText = aPalrs[i].split(","); // each item is a "value,name" pair 
oltem = new Option; 
oltem.value = aValueText[0]; 
oltem.text = aValueText[1]; 
selField,options[selField.options.length] = oltem; 



aPairs[aPairs, length - 1] = null; 



aPairs.length--; 



76 selField. options. selectedlndex = 0; 

77 } 

78 </script> 

79 <body onLoad="javascript:post_data()"> 

80 <TABLE> 

81 <TR> 

82 <TH>Remote Scripting Type:</TH> 

83 <TD> 

84 <input type="radio" name="clientType" value="JSRS" CHECKED>AppeonRPC 

85 </TD> 

86 </TR> 

87 <TR> 

88 <TH>Category:</TH> 

89 <TD> 

90 <SELECT name="category" onChange="javascrlpt:post_data()"> 

91 <OPTION value="0" SELECTED>Category 0</OPTION> 

92 <OPTION value="1 ">Category 1 </OPTION> 

93 <OPTION value="2">Category 2</OPTION> 

94 <OPTION value="3">Error Test</OPTION> 

95 </SELECT> 

96 </TD> 

97 </TR> 

98 <TR> 

99 <TH>Subcategory:</TH> 

100 <TD> 

1 01 <SELECT name="subcategory"> 

102 <!-- Need a placeholder until it can get loaded --> 

103 <OPTION value="-1" SELECTED> </OPTION> 

104 </SELECT> 

105 </TD> 

106 </TR> 

107 </TABLE> 



108 
109 



</body> 
</html> 
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1 

2 <!"#include file="serverproxy2.inc"~> 

3 <script runat=Server language=VBScript> 

4 function getData(strPara) 
5 

6 getData = strPara 

7 end function 

8 </script> 
9 
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3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 
26 
27 
28 
29 
30 
31 
32 
33 
34 
35 
36 
37 
38 
39 
40 
41 
42 



1 <%@ Language=JavaScript %> 

2 <% ^^^TRfi^ 

var _LML_PARAMS_DELIM = String.fromCharCode(1 ); 
var i, strBody, strResuIt; 
var strFunc, strCallback; 
var strParams, arrParams; 
StrFunc = FJequest("func").item; 
StrParams = Request{"params").item; 
StrCallback = Request("callback").item; 

response.write(strFunc+"<br>"+strCaflback+"<br>"+strParams); 



StrParams = getSubcategories(strParams); 

StrParams = T" + strParams + T"; 

strResult = escape(eval(strFunc + "(" + strParams + ")")); 

StrBody = "<HTML><HEAD></HEAD>" 

StrBody += "<BODY onload=parent.window. J(": 

StrBody += "V" + strCallback + T,"; 

StrBody += T" + strResult + T"; 

StrBody += ")>"; 

StrBody += "</BODY></HTML>"; 

Response.Write(strBody); 

function EscapeSpecialChars(strSrc) 

{ 

var strDest = strSrc; 
strDest = strDest.replace(A\/g, AWV); 
StrDest = strDest.replace(Ar/g, "Wr'); 
StrDest = strDest. replace(An/g, ^\n'); 
StrDest = strDest.replace{/7g. •\\V"); 
StrDest = strDest.replace(/Vg, W); 
return strDest; 

return strSrc; 

} 

function getSubcategories{strlndex) 

{ 

var retval; 

switch(strlndex) 
{ 
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Subcategory 1;2, Category 0 - 



case "0": 

retval = "0, Category 0 - Subcategory 0;1, Category 0 
Subcategory 2;"; 

43 break; 

44 case"1": 

45 retval = "O.Category 1 - Subcategory 0;1, Category 1 - Subcategory 1;2,Category 1 - 
Subcategory 2;"; 

46 break; 

47 case "2": 

48 retval = "0, Category 2 - Subcategory 0;1 .Category 2 



Subcategory 2;"; 



Subcategory 1;2. Category 2 



49 
50 
51 
52 
53 
54 
55 

56 } 

57 %> 



break; 
case "3": 

retval = "error"; 
break; 

} 

return retval; 



Page: 1 




?^r/^ cj/i^'s <ginir-ce CooU^ 

Rife: RSExample.html 2004-7-12, 2:30:28 

1 <HTML> 
2 

3 <HEAD> 

4 <title>Remote Scripting w/ Servlet Example</title> 

5 <script language="javascript" src=7jsrsClient.js"></scri^ 

6 <script language=Javascript src="_ScriptLibrary/rs.htm"></script> 
7 

8 <script language=javascript> 

9 function clearDropDown (sel Field) 

1 1 while (selFleld.options.length > 0) RECEIVED 

12 selField.options[0] = null; 

13 } AUG 3 0 2004 

14 

15 function populateDropDown (valueTextStr) TBChflOlOgy CSfltBr 2100 

17 //debugger; 

18 var selField = document.forml. subcategory; 

1 9 clearDropDown(selField); 
20 

21 // create an array of each item for the dropdown 

22 var aPairs = valueTextStr.split(";"); 

23 if (valueTextStr.substr(valueTextStr.length - 1) == ';') { 

24 aPairs[aPairs. length - 1] = null; 

25 aPairs.length--; 

26 } 

27 // Fill 'er up 

28 for (var i=0; i < aPairs. length; i++) { 

29 aValueText = aPairs[i].split(","); // each item is a "value,name" pair 

30 oltem = new Option; 

31 oltem.value = aValueText[0]; 

32 oltem.text = aValueText[1]; 

33 selField.options[selField. options. length] = oltem; 

34 } 

35 selField.options.selectedlndex = 0; 

36 } 
37 

38 function categoryChanged() 

39 { 

40 // JSRS 

41 jsrsExecute(7myservlet/RSExample". populateDropDown, "getSubcategories", 
document.forml. category. options[document.form1.category.selectedlndex].value); 

42 } 

43 </script> 
44 

45 </HEAD> 

46 <BODY onLoad="javascript:categoryChanged()"> 

47 <FORM name="form1"> 

48 <TABLE> 

49 <TR> 

50 <TH>Remote Scripting Type:</TH> 

51 <TD> 

52 <input type="radio" name="cllentType" value="JSRS" CHECKED>JSRS 

53 </TD> 

54 </TR> 

55 <TR> 

56 <TH>Category:</TH> 

57 <TD> 

58 <SELECT name="category" onChange="javascript:categoryChanged()"> 

59 <OPTION value="0" SELECTED>Category 0</OPTION> 

60 <OPTION value="1 ">Category 1 </OPTION> 

61 <OPTION value="2">Category 2</OPTION> 
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62 <OPTION value="3">Error Test</OPTION> 

63 </SELECT> 

64 </TD> 

65 </TR> 

66 <TR> 

67 <TH>Subcategory:</TH> 

68 <TD> 

69 <SELECT name="subcategory"> 

70 <!-- Need a placeholder until it can get loaded -> 

71 <OPTION value="-1 " SELECTED> </OPTION> 

72 </SELECT> 

73 </TD> 

74 </TR> 

75 </TABLE> 

76 </FORM> 

77 </BODY> 

78 </HTML> 
79 

80 
81 
82 
83 
84 
85 
86 
87 
88 
■89 
90 
91 
92 
93 
94 
95 
96 
97 
98 



Page: 2 



File: jsrsClient.js 2004-7-12. 2:10:34 



1 // 

2 // jsrsClient.js - javascript remote scripting client Include 

3 // 

4 //Author: Brent Ashley [jsrs@megahuge.com] '^-O^^OF^'-* 

5 // 

6 // make asynchronous remote calls to server without client page refresh 

7 // 

8 // see license.txt for copyright and license information 
9 

10 /* 

1 1 see history.txt for full history 

12 2.0 26 Jul 2001 - added POST capability for lE/MOZ 

13 2.2 10 Aug 2003 -added Opera support 

14 2.3{beta) 10 Oct 2003 - added Konqueror support - **needs more testing 

15 */ 
16 

17 // callback pool needs global scope 

18 var jsrsContextPoolSize = 0; 

19 var jsrsContextMaxPool = 10; 

20 var jsrsContextPool = new Array(); 

21 var jsrsBrowser = jsrsBrowserSniff(); 

22 varjsrsPOST = true; 

23 var containerName; 
24 

25 // constructor for context object 

26 function jsrsContextObj( contextID ){ 
27 

28 // properties 

29 this. id = contextID; 

30 this. busy = true; 

31 this.callback = null; 

32 this. container = contextCreateContainer( contextID ); 
33 

34 // methods 

35 this.GET = contextGET; 

36 this.POST = contextPOST; 

37 this.getPayload = contextGetPayload; 

38 this.setVisibility = contextSetVisibility; 

39 } 
40 

41 // method functions are not privately scoped 

42 // because Netscape's debugger chokes on private functions 

43 function contextCreateContainer( containerName ){ 

44 // creates hidden container to receive server data 

45 var container; 

46 switch( jsrsBrowser ) { 

47 case 'NS': 

48 container = new Layer(IOO); 

49 container.name = containerName; 

50 container, visibility = 'hidden'; 

51 container.clip.width = 100; 

52 container.clip. height = 100; 

53 break; 
54 

55 case 'IE': 

56 document.body.lnsertAdjacentHTML( "afterBegin'\ '<span id="SPAN' + containerName + "'></span>' ); 

57 var span = document.all( "SPAN" + containerName ); 

58 var html = '<iframe name="' + containerName + "' src=""></iframe>*; 

59 spanJnnerHTML = html; 

60 span.style.display = 'none'; 

61 container = window.frames[ containerName ]; 

62 break; 
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63 

64 case 'MOZ': 

65 var span = document.createElennent('SPAN'); 

66 span. id = "SPAN" + containerName; 

67 document.body.appendChild{ span ); 

68 var iframe = document.createElement('IFRAME'); 

69 iframe. name = containerName; 

70 iframe. id = containerName; 

71 span.appendChild( iframe ); 

72 container = iframe; 

73 break; 
74 

75 case 'OPR': 

76 var span = document.createElement('SPAN'); 

77 span. id = "SPAN" + containerName; 

78 document.body.appendChild( span ); 

79 var iframe = document.createElement('IFRAIVIE'); 

80 iframe. name = containerName; 

81 iframe.id = containerName; 

82 span.appendChild( iframe ); 

83 container = iframe; 

84 break; 
85 

86 case 'KONQ': 

87 var span = document.createElement('SPAN'); 

88 span, id = "SPAN" + containerName; 

89 document.body.appendChild( span ); 

90 var iframe = document.createElementCIFRAIVIE'); 

91 iframe.name = containerName; 

92 iframe.id = containerName; 

93 span.appendChild( iframe ); 

94 container = iframe; 
95 

96 // Needs to be hidden for Konqueror, otherwise it'll appear on the page 

97 span.style.display = none; 

98 iframe.style.display = none; 

99 iframe.style.visibility = hidden; 

100 iframe.height = 0; 

101 iframe.width = 0; 
102 

1 03 break; 

104 } 

105 return container; 

106 } 
107 

108 function contextPOST( rsPage, func, parms ){ 
109 

110 //debugger; 

1 1 1 var d = new Date(); 

112 var unique = d.getTime() + " + Math.floor(1000 * Math.random()); 

113 var doc = GsrsBrowser == "IE" ) ? this.container.document : this.container.contentDocument; 

114 doc.open(); 

1 1 5 doc.write('<html><body>*); 

116 doc.write('<form name="jsrsForm" method="post" target="" '); 

117 doc.write(' action="' + rsPage + ^U^' + unique + '">'); 

118 doc.write('<input type="hidden" name- 'C" value="' + this. id + "'>'); 
119 

120 // func and parms are optional 

121 if (func != null){ 

122 doc.writeC<input type="hidden" name="F" value="' + func + "'>'); 
123 

124 if (parms 1= null){ 
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1 25 if (typeof(parms) == "string"){ 

1 26 // single parameter 

127 doc.write( '<input type-'hidden" name="PO" ' 

1 28 + Value="r + jsrsEscapeQQ(parms) + ']">'); 

129 }else{ 

130 // assume parms is array of strings 

131 for( var 1=0; i < parms. length; i++ ){ 

132 doc.write( *<input type="hidden" name="P' + i + 

1 33 + Value="[' + jsrsEscapeQQ(parms[i]) + ']">'); 

134 } 

1 35 } // parm type 

136 }// parms 

137 }//func 
138 

1 39 doc.write('</form></body></html>'); 

140 doc.closeO; 

141 doc.formsnsrsForm'].submit(); 

142 } 
143 

144 function contextGET( rsPage, func, parms ){ 

145 //debugger; 

146 // build URL to call 

147 var URL = rsPage; 
148 

149 // always send context 

150 URL += "?C=" + this.id; 
151 

1 52 // func and parms are optional 

153 if (func!=null){ 

1 54 URL += "&F=" + escape(func); 
155 

156 if (parms != nuil){ 

157 if {typeof(parms) == "string"){ 

158 // single parameter 

159 URL += "&P0=[" + escape(parms+") + "]"; 

160 }else{ 

161 // assume parms is array of strings 

162 for( var 1=0; 1 < parms. length; i++ ){ 

163 URL += "&P" + i + "=[" + escape(parms[i]+") + "]"; 

164 } 

1 65 } // parm type 

166 }// parms 

167 }//func 
168 

169 // unique string to defeat cache 

1 70 var d = new Date(); 

1 71 URL += "&U=" + d.getTimeO; 
172 

173 // make the call 

1 74 switch( jsrsBrowser ) { 

175 case'NS': 

1 76 this.container.src = URL; 

177 break; 

178 case ME': 

179 this.container.document.location.replace(URL); 

180 break; 

181 case'MOZ': 

182 this.container.src = "; 

183 this.container.src = URL; 

184 break; 

185 case'OPR': 

186 this.container.src = "; 
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187 this.container.src = URL; 

188 break; 

189 case'KONQ': 

190 this.container.src = "; 

191 this.container.src = URL; 

192 break; 

193 } 

194 } 
195 

196 function contextGetPayload(){ 

1 97 switch( jsrsBrowser ) { 

198 case'NS': 

199 return this.container.docunnent.forms['jsrs_Fornn'].elementsnsrs_Payload'].value; 

200 case 'IE': 

201 return this.container.docunnent,fornris['jsrs_Form']['jsrs_Payload'].value; 

202 case 'MOZ': 

203 return window.frames[this.container.name].document.forms['jsrs_Form']['jsrs_Payload'].value; 

204 case 'OPR': 

205 var textElement = window.frannes[this.container.name].document.getElementByld("jsrs_Payload"); 

206 case 'KONQ': 

207 var textElement = window.frannes[this.container.nanne].document.getElementByld("jsrs_Payload"); 

208 return textElement. value; 

209 } 

210 } 
211 

212 function contextSetVisibility( vis ){ 

213 switch( jsrsBrowser ) { 

214 case'NS': 

215 this.container. visibility = (vis)? 'show' : 'hidden'; 

216 break; 

217 case 'IE': 

218 document.allC'SPAN" + this.id ).style.display = (vis)? " : 'none'; 

219 break; 

220 case 'MOZ: 

221 documentgetElementByldC'SPAN" + this.id).style.visibility = (vis)? " : 'hidden'; 

222 case 'OPR': 

223 documentgetElementByldC'SPAN" + this.id).style.vlsibility = (vis)? " : 'hidden'; 

224 this.container. width = (vis)? 250 : 0; 

225 this.container.height = (vis)? 100 : 0; 

226 break; 

227 } 

228 } 
229 

230 // end of context constructor 
231 

232 function jsrsGetContextlD(){ 

233 var contextObj; 

234 for (var i = 1 ; i <= jsrsContextPoolSize; i++){ 

235 contextObj = jsrsContextPool[ 'jsrs' + i ]; 

236 if ( IcontextObj.busy ){ 

237 contextObj. busy = true; 

238 return contextObj. id; 

239 } 

240 } 

241 // if we got here, there are no existing free contexts 

242 if ( jsrsContextPoolSize <= JsrsContextMaxPool ){ 

243 // create new context 

244 var contextID = "jsrs" + GsrsContextPoolSize + 1); 

245 jsrsContextPool[ contextID ] = new jsrsContextObj( contextID ); 

246 jsrsContextPoolSize++; 

247 return contextID; 

248 } else { 
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249 alert( "jsrs Error: context pool full" ); 

250 return null; 

251 } 

252 } 
253 

254 function jsrsExecute( rspage, callback, func, parms, visibility ){ 

255 // call a server routine from client code 

256 // 

257 // rspage - href to asp file 

258 // callback - function to call on return 

259 // or null if no return needed 

260 // (passes returned string to callback) 

261 // func - sub or function name to call 

262 // parm - string parameter to function 

263 // or array of string parameters if more than one 

264 // visibility - optional boolean to make container visible for debugging 
265 

266 // get context 

267 //debugger; 

268 var contextObj = jsrsContextPool[ jsrsGetContextlD() ]; 

269 contextObj. callback = callback; 
270 

271 var vis = (visibility == null)? false : visibility; 

272 contextObj. setVisibility( vis ); 
273 

274 if ( jsrsPOST && ((jsrsBrowser == 'IE') || (jsrsBrowser == •MOZ'))){ 

275 contextObj. POST( rspage, func, parms ); 

276 } else { 

277 contextObj. GET( rspage, func, parms ); 

278 } 
279 

280 return contextObj. id; 

281 } 
282 

283 function jsrsLoaded( context ID ){ 

284 // get context object and invoke callback 

285 var contextObj = jsrsContextPool[ contextID ]; 

286 if( contextObj.callback != null){ 

287 contextObj. callback( jsrsUnescape( contextObj.getPayload() ), contextID ); 

288 } 

289 // clean up and return context to pool 

290 contextObj.callback = null; 

291 contextObj. busy = false; 

292 } 
293 

294 function jsrsError( contextID, str ){ 

295 alert( unescape(str) ); 

296 jsrsContextPool[ contextID ].busy = false 

297 } 
298 

299 function jsrsEscapeQQ( thing ){ 

300 return thing.replace(/'"7g, AV"); 

301 } 
302 

303 function jsrsUnescape( str ){ 

304 // payload has slashes escaped with whacks 

305 return str.replace( A\V/g, 7" ); 

306 } 
307 

308 function jsrsBrowserSniff(){ 

309 if (document.layers) return "NS"; 

310 if (document.all) { 
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311 // But is it really IE? 

312 // convert all characters to lowercase to simplify testing 

313 var agt=navigator.userAgent.toLowerCase(); 

314 var is_opera = {agt.indexOf("opera") != -1 ); 

315 var is_konq = (agt.indexOf("konqueror") != -1 ); 

316 if(is_opera) { 

317 return "OPR"; 

318 }else{ 

319 if(is_konq){ 

320 return "KONQ"; 

321 } else { 

322 // Really is IE 

323 return "IE"; 

324 } 

325 } 



326 } 

327 if (document.getElementByld) return "MOZ"; 

328 return "OTHER"; 

329 } 
330 

331 iiiiiiiiiiiiiiiiiminiminiiifiniiinnniii 

332 // 

333 // user functions 
334 

335 function jsrsArrayFronnStrlng( s, delim ){ 

336 // rebuild an array returned from server as string 

337 // optional delimiter defaults to - 

338 var d = (delim == null)? : delim; 

339 return s.split(d); 

340 } 
341 

342 function jsrsDebuglnfo(){ 

343 // use for debugging by attaching to f1 (works with IE) 

344 // with onHelp = "return jsrsDebuglnfo();" in the body tag 

345 var doc = window.open(). document; 

346 doc.open; 

347 doc.write( 'Pool Size: ' + jsrsContextPoolSIze + *<br><font face="arlal" size="2"><b>' ); 

348 for( var i in jsrsContextPool ){ 



349 var contextObj = jsrsContextPool[i]; 

350 doc.write( '<hr>' + contextObj. id + ' : ' + (contextObj. busy ? 'busy' : 'available') + *<br>'); 

351 doc.write( contextObj.container.document.location. pathname + '<br>'); 

352 doc.write( contextObj.container.document.location. search + '<br>'); 

353 doc.write( •<table border="1"><tr><td>' + contextObj. container.document.body.innerHTML + 



•</td></tr></table>' ); 

354 } 

355 doc,write('</table>'); 

356 doccloseO; 

357 return false; 

358 } 
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1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 
26 
27 
28 



package com; 

public class RSExample extends RemoteScfi^lllBlf^ervlet { 

public static String getSubcategories (String' catstr) throws Exception 
{ 

// sure, there is a possibility of an exception happening here, but 
// RemoteScriptingServlet will catch it and deal with It appropriately 



int catid = Integer.parselnt(catstr); 

String subcats[][] = new String[]D { 
new StringD {"Category 0 - Subcategory 0", 
new Stringn {"Category 1 - Subcategory 0", 
new StringG {"Category 2 - Subcategory 0", 

}: 



'Category 0 - Subcategory 1", 
'Category 1 - Subcategory 1", 
'Category 2 - Subcategory 1", 



'Category 0 
'Category 1 
'Category 2 



Subcategory 2"}. 
Subcategory 2"}, 
Subcategory 2"}, 



} 



String retval = 

for (int i = 0; i < subcats[catid]. length; i++) { 
// build a string with "index.value" pairs separated by semicolons 
// for demo brevity, we'll assume that no commas or semicolons are present 
// in the values of subcats[catid][i] 
retval += 1 + "," + subcats[catid][i] + ";'*; 

} 

return retval; 
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2 package com; 
3 

4 // eHatcher Solutions, Inc 
5 

6 import java.lang. reflect.*; 

7 import java.io.*; 

8 import java.net.URLEncoder; 

9 import java.text.*; 

10 import java.util.*; 

1 1 import javax.servlet.*; 

12 import javax.servlet.http.*; 




13 

14 /** 

15 * Base class for remote scripting sen/lets that use Microsoft's remote scripting (MSRS) or JavaScript remote 
scripting (JSRS). 

16 * 

17 * Usage: 

18 *<pre> 

19 * public class RSExample extends RemoteScriptingServlet { 

20 * public static String getSubcategories (String catstr) throws Exception 

21 * { 

22 * String retval = ""; 

23 * // ... implementation details 

24 * return retval; 

25 * } 

26 *} 

27 *</pre> 

28 * 

29 * ©version 1.0 February 10, 2001 

30 * ©author Erik Hatcher 

31 */ 
32 

33 abstract public class RemoteScriptingServlet extends HttpServlet { 
34 

35 boolean debugOn = false; 
36 

37 private final static int MSRS = 0; 

38 private final static int JSRS = 1 ; 
39 

40 private int clientType; 

41 public void doPost(HttpServletRequest request, HttpServletResponse response) 

42 throws ServletException, lOException { 

43 //processRequest(request, response); 

44 debugOn = request.getParameter("debug") != null; 



45 
46 
47 
48 
49 
50 
51 
52 
53 
54 
55 
56 
57 
58 
59 
60 
61 



// Everything is wrapped in a try/catch block, any exception will cause the ERROR return value 

// so that the client side can deal with it gracefully 

try{ 

String method; 

int pcount = 0; 



boolean error = false; 
String returnValue; 
String callbackName = 



// client is JSRS - it passes a "C" 
//obtain 
clientType = JSRS; 



callbackName = request.getParameter("C"); 



tin. 



parameter 
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62 method = request.getParanneter("F"); 
63 

64 // JS call doesn't tell us how many parameters, so count them 

65 //get parameters 

66 while (request.getParameterfP" + pcount) != null) 

67 pcount++; 
68 

69 // build paramSpec array with all String class items 

70 // build params array with the pO, p1, pN request values 

71 Class paramSpecQ = new Class[pcount]; 

72 Class stringClass = Class.forName("java.lang. String"); 

73 String paramsQ = new String[pcount]; 

74 if (pcount > 0) { 

75 for (int i=0; i < pcount; i++) { 

76 paramSpec[i] = stringClass; 

77 params[i] = request.getParameter("P" + i); 
78 

79 //strip brackets off 

80 params[i] = params[i].substrjng(1, params[i].length() - 1); 

81 } 

82 } 
83 

84 // find and invoke the appropriate static method in the concrete class 

85 Class c = this.getClassO; 

86 Method m = c.getMethod(method, paramSpec); 

87 returnValue = (String) m.invoke(null, params); 

88 } catch (Exception e) { 

89 // if the Invoked method threw an exception, pull it out of the wrapper exception that "invoke" throws 

90 // so that the client gets the real error message 

91 if (e instanceof InvocationTargetException) { 

92 e = (Exception) ((lnvocationTargetException)e).getTargetException(); 

93 } 

94 debug("Oops, exception: " + e); 

95 error = true; 

96 returnValue = e.toStringO; 

97 e.printStackTraceO; 

98 } 

99 //build up the ourput sting 

1 00 String outputString = ""; 

101 // Build the appropriate JSRS response 

102 outputString = "<html><head></head><body onload=V'p=document.layers?parentLayer:window.parent;" 

103 if (error) { 

104 outputString += "p.jsrsError('" + callbackName + "','jsrsError: " + encode(returnValue) + '");\">jsrsError: 
+ jsrsErrorEscape(returnValue); 

105 } 

106 else{ 

107 outputString += "p.jsrsLoadedC" + callbackName + "');\">jsrsPayload:<br><form 
name=\"jsrs_Form\"><textarea name=\"jsrs_Payload\">" + jsrsEscape(returnValue) + "</textarea></form>"; 

1 08 outputString += "</body></html>"; 

109 } 

1 1 0 response. setContentType("text/html"); 

1 1 1 PrintWriter out = response:getWriter(); 

112 out.println(outputString): 

113 } 

114 /** 

115 * Generates the appropriate response to either an MSRS or JSRS method invocation. 

116 V 

117 public void doGet{HttpServletRequest request, HttpServletResponse response) 

118 throws lOException, ServletException 

119 { 

120 // Requests look like this: 

121 // MSRS: <servletname>?_method=method&_mtype=execute&pcount=1&p0=1 
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1 22 // JSRS: <servletname>?C=callback&F=method&P0=[1 ] 

123 debugOn = request.getParameter("debug") != null; 

124 debug(" "); 

125 

1 26 // response.getWriter(). write("dsfsd f sdf sdf "); 
127 

128 boolean error = false; 

129 String return Value; 

1 30 String callbackName = ""; 
131 

132 // Everything Is wrapped In a try/catch block, any exception will cause the ERROR return value 

1 33 // so that the client side can deal with it gracefully 

134 try{ 

135 String method; 

136 intpcount = 0; 
137 

138 callbackName = request.getParameter("C"); 

1 39 if (callbackName != null) { 

140 // client is JSRS - it passes a "C" parameter 

141 clientType = JSRS; 

142 method = request.getParameter("F"); 
143 

144 // JSRS doesn't tell us how many parameters, so count them 

145 while (request.getParameter("P" + pcount) != null) 

146 pcount++; 

147 } 

148 else{ 

149 ClientType = MSRS; 

150 method = request.getParameter("_method"); 

1 51 pcount = lnteger.parselnt(request.getParameter("pcount")); 

152 } 
153 

154 debugC'clientType = " + clientType); 

1 55 debug("Method = " + method); 

156 debug("pcount = " + pcount); 
157 

158 

159 // build paramSpec array with all String class items 

160 // build params array with the pO, pi , ..... pN request values 

161 Class paramSpecQ = new Class[pcount]; 

162 Class stringClass = Class.forName("java.lang. String"); 

163 String paramsQ = new String[pcount]; 

164 if (pcount > 0) { 

165 for (int i=0; i < pcount; i++) { 

166 paramSpec[i] = stringClass; 

167 params[i] = request.getParameter(( (clientType == MSRS) ? "p" : "P") + i); 
168 

1 69 if (ClientType == JSRS) { 

170 // JSRS sends parameters wrapped with brackets, strip them off 

171 params[i] = params[i].substring(1, params[i]Jength() - 1); 

172 } 
173 

174 debug("p" + i + " = " + params[i]); 

175 } 

176 } 
177 

178 // find and invoke the appropriate static method in the concrete class 

179 Class c = this.getClassO; 

180 Method m = c.getMethod(method, paramSpec); 

181 returnValue = (String) m.invoke(null, params); 

182 } catch (Exception e) { 

183 // if the invoked method threw an exception, pull it out of the wrapper exception that "invoke" throws 
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184 // so that the client gets the real error message 

185 if (e instanceof InvocationTargetException) { 

186 e = (Exception) ((lnvocationTargetException)e).getTargetException(); 

187 } 

188 debugC'Oops, exception: " + e); 

189 error = true; 

190 return Value = e.toStringO; 

191 e.printStackTraceO; 

192 } 
193 

194 String outputString = ""; 

1 95 if (clientType == MSRS) { 

196 // Build the appropriate MSRS response 

197 // Microsoft's Remote Scripting has three types: SIMPLE, EVAL_OBJECT, and ERROR. 

198 // Currently only SIMPLE and ERROR are supported. 

199 outputString = "<METHOD VERSION=\"1 .0.8044\"><RETURN_VALUE TYPE=" + (error ? "ERROR" : 
"SIMPLE") + + encode(returnValue) + "</RETURN_VALUE></METHOD>"; 

200 } 

201 else { 

202 // Build the appropriate JSRS response 

203 outputString = "<html><head></head><body onload=\"p=document,layers?parentLayer:window.parent;"; 

204 if (error) { 

205 outputString += "p.jsrsErrorC" + callbackName + "'/jsrsError: " + encode(returnValue) + "');V'>jsrsError: " 
+ jsrsErrorEscape(returnValue); 

206 } 

207 else { 

208 outputString += "p.jsrsLoaded("' + callbackName + "');\">jsrsPayload:<br><form 
name=V'jsrs__FormV'><textarea name=\"jsrs_Payload\">" + jsrsEscape(returnValue) + "</textarea></form>"- 

209 } 

210 outputString += "</body></html>"; 

211 } 
212 

213 response.setContentType("text/html"); 

214 PrintWriter out = response.getWriter(); 

215 out.println(outputString); 

216 } 
217 

218 private void debug (String str) 

219 { 

220 if (debugOn) System.out.printIn("[RemoteScriptingServlet] " + str); 

221 } 
222 

223 public static String jsrsEscape (String str) 

224 { 

225 StringBuffer sb = new StringBuffer(str); 
226 

227 // probably an easier way to do this, but this will do for now 

228 for (int i = 0; i < sb.length(); i++) { 

229 if (sb.charAt(i) == V) { 

230 sb.replace(ij+1 ,"\V"); 

231 i += 2; 

232 } 

233 } 
234 

235 return new String(sb); 

236 } 
237 

238 public static String jsrsErrorEscape (String str) 

239 { 

240 StringBuffer sb = new StringBuffer(str); 
241 

242 // probably an easier way to do this, but this will do for now 
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243 for (int i = 0; i < sb.length(); { 

244 if (sb.charAt(i) == T) { 

245 sb.replace(i,i+1,"\V"): 

246 i += 2; 

247 } 

248 if (sb.charAt(i) == V) { 

249 sb.replace(i,i+1,"\\V'"): 
. 250 i += 2; 

251 } 

252 } 
• 253 

254 return new String(sb); 

255 } 
256 
257 

258 public static String encode (String str) 

259 { 

260 // but URLEncoder.encode isn't enough... should really be "%20" 

261 StringBuffer sb = new StringBuffer(URLEncoder.encode(str)); 
262 

263 for (int i = 0; i < sb.length(); i++) { 

264 if (sb.charAt(i) == '+') { 

265 sb.replace(i,i+1,"%20"); 

266 i += 2; 

267 } 

268 } 
269 

270 return new String(sb); 

271 } 

272 r 

273 MSRS return details: 
274 

275 String return: 

276 <METHOD VERSION="1 .0.8044"><RETURN_VALUE 
TYPE=SIMPLE>%3CMessages%3E%3CMsg7%20ID%3D%221%22%3EMsg7%20data%3C/Msg7%3E%3C/ 
Messages%3E</RETURN_VALUE></METHOD> 

277 

278 Error return: 

279 <METHOD VERSION="1 .0.8044"><RETURN_VALUE 

TYPE=ERROR>xyz%20%3A%20not%20a%20public%20function</RETURN_VALUE></METHOD> 

280 */ 
281 

282 /* 

283 JSRS return details: 
284 

285 SuccessfuUSRS return: 

286 <htnnl><head></head><body 
onload="p=document.layers?parentLayer:window.parent;p.jsrsLoaded('jsrs1');">jsrsPayload:<br><form 
name="jsrs_Form"><textarea name="jsrs_Payload">string*TEST</textarea></form></body></html> 

287 

288 Error JSRS return: 

289 <html><head></head><body 

onload="p=document.layers?parentLayer:window.parent;p.jsrsError('jsrsr,'error');">error</body></html> 

290 */ 
291 
292 } 
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